dvwa mysql_error()_DVWA登录错误

太过爱你忘了你带给我的痛 2022-11-01 00:45 7阅读 0赞

我无法登录到我的DVWA。DVWA登录错误

我搜索了网页，但无法找到答案。数据库创建好了，似乎很好，但是当我想登录时，我收到一条错误消息：

致命错误：\[MySQLConverterToo\]修复mysql\_escape\_string()调用！此代码不起作用。在/Applications/XAMPP/xamppfiles/htdocs/dvwa/login.php在线11

我的config.inc.php：

\# If you are having problems connecting to the MySQL database and all of the variables below are correct

\# try changing the 'db\_server' variable from localhost to 127.0.0.1. Fixes a problem due to sockets.

\# Thanks to @digininja for the fix.

\# Database management system to use

$DBMS = 'MySQL';

\#$DBMS = 'PGSQL'; // Currently disabled

\# Database variables

\# WARNING: The database specified under db\_database WILL BE ENTIRELY DELETED during setup.

\# Please use a database dedicated to DVWA.

$\_DVWA = array();

$\_DVWA\[ 'db\_server' \] = '127.0.0.1';

$\_DVWA\[ 'db\_database' \] = 'dvwa';

$\_DVWA\[ 'db\_user' \] = 'root';

$\_DVWA\[ 'db\_password' \] = '';

\# Only used with PostgreSQL/PGSQL database selection.

$\_DVWA\[ 'db\_port '\] = '5432';

\# ReCAPTCHA settings

\# Used for the 'Insecure CAPTCHA' module

\# You'll need to generate your own keys at: https://www.google.com/recaptcha/admin/create

$\_DVWA\[ 'recaptcha\_public\_key' \] = '6LdK7xITAAzzAAJQTfL7fu6I-0aPl8KHHieAT\_yJg';

$\_DVWA\[ 'recaptcha\_private\_key' \] = '6LdK7xITAzzAAL\_uw9YXVUOPoIHPZLfw2K1n5NVQ';

\# Default security level

\# Default value for the secuirty level with each session.

\# The default is 'impossible'. You may wish to set this to either 'low', 'medium', 'high' or impossible'.

$\_DVWA\[ 'default\_security\_level' \] = 'impossible';

\# Default PHPIDS status

\# PHPIDS status with each session.

\# The default is 'disabled'. You can set this to be either 'enabled' or 'disabled'.

$\_DVWA\[ 'default\_phpids\_level' \] = 'disabled';

\# Verbose PHPIDS messages

\# Enabling this will show why the WAF blocked the request on the blocked request.

\# The default is 'disabled'. You can set this to be either 'true' or 'false'.

$\_DVWA\[ 'default\_phpids\_verbose' \] = 'false';

和我的login.php：

define('DVWA\_WEB\_PAGE\_TO\_ROOT', '');

require\_once DVWA\_WEB\_PAGE\_TO\_ROOT . 'dvwa/includes/dvwaPage.inc.php';

dvwaPageStartup(array('phpids'));

dvwaDatabaseConnect();

if(isset($\_POST\[ 'Login' \])) \{

// Anti-CSRF

checkToken($\_REQUEST\[ 'user\_token' \], $\_SESSION\[ 'session\_token' \], 'login.php');

$user = $\_POST\[ 'username' \];

$user = stripslashes($user);

$user = mysql\_real\_escape\_string($user);

$pass = $\_POST\[ 'password' \];

$pass = stripslashes($pass);

$pass = mysql\_real\_escape\_string($pass);

$pass = md5($pass);

$query = ("SELECT table\_schema, table\_name, create\_time

FROM information\_schema.tables

WHERE table\_schema='\{$\_DVWA\['db\_database'\]\}' AND table\_name='users'

LIMIT 1");

$result = @mysql\_query($query);

if(mysql\_num\_rows($result) != 1) \{

dvwaMessagePush("First time using DVWA.  
Need to run 'setup.php'.");

dvwaRedirect(DVWA\_WEB\_PAGE\_TO\_ROOT . 'setup.php');

$query = "SELECT \* FROM \`users\` WHERE user='$user' AND password='$pass';";

$result = @mysql\_query($query) or die('

' . mysql_error() . '.
    Try installing again.

');

if($result && mysql\_num\_rows($result) == 1) \{ // Login Successful...

dvwaMessagePush("You have logged in as '\{$user\}'");

dvwaLogin($user);

dvwaRedirect(DVWA\_WEB\_PAGE\_TO\_ROOT . 'index.php');

// Login failed

dvwaMessagePush('Login failed');

dvwaRedirect('login.php');

$messagesHtml = messagesPopAllToHtml();

Header('Cache-Control: no-cache, must-revalidate'); // HTTP/1.1

Header('Content-Type: text/html;charset=utf-8'); // TODO- proper XHTML headers...

Header('Expires: Tue, 23 Jun 2009 12:00:00 GMT'); // Date in the past

// Anti-CSRF

generateSessionToken();

echo "

"-//W3C//DTD XHTML 1.0 Strict//EN\\" \\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\\">

![%5C%22%22][5C_22_22]

Username

Password

" . tokenField() . "

\{$messagesHtml\}

" . dvwaExternalLinkUrlGet('http://www.dvwa.co.uk/', 'Damn Vulnerable Web Application (DVWA)') . " is a RandomStorm OpenSource project.

我只有改变：

$\_DVWA\[ 'db\_password' \] = '';

，因为否则就不能创造..

发生了什么事？

我完全是这个新手，但我也快死了！ ;-)

2016-11-22

Dasuper

[5C_22_22]:

dvwa mysql_error()_DVWA登录错误

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 DVWA教程详细的DVWA-CSRF全等级通关教程

相关 DVWA通关攻略_DVWA通关教程(上)

相关 DVWA环境

相关 DVWA+Xampp安装配置教程+错误终极总结

相关 dvwa 之csrf

相关 dvwa command injection

相关 dvwa mysql_error()_DVWA登录错误

相关 DVWA之CSRF学习

相关 kali之DVWA

相关 ubuntu 远程登录错误